SDK: add generateTokenForUser endpoint

[tomfa]

For a user with admin priviliges (e.g. on an API), we should be able to call sdk.createUserToken(userID: string, audience?: string, customPriviliges?: string[]) to generate a user token.

[tomfa]

I'm starting to see the reason why everyone gives out customerSecret and customerId to their sass users.